Session Fixation In libcatalyst-plugin-authentication-perl
Description
Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks. Catalyst::Plugin::Authentication does not automatically change the session id after authentication. An attacker that obtains a session id cookie can use this to impersonate the victim.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version |
|---|---|---|
 debian 12 | ||
debian 13 | ||
debian 11 | ||
debian 14 |
Aliases
1. 2. 3. 4. 5.